Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TotoLink A3100R 安全特征问题漏洞
Vulnerability Description
TotoLink A3100R是中国台湾吉翁电子(TotoLink)公司的一系列无线路由器。 TotoLink A3100R V5.9c.4577 版本存在安全漏洞,该漏洞源于通过 Web 配置使用不足随机值的问题。 SESSION_ID 是可预测的。 攻击者可以劫持有效会话并进行进一步的恶意操作。
CVSS Information
N/A
Vulnerability Type
N/A